Founding Security Engineer
Bitsmith Technologies
Pune Division, Maharashtra, India1h agovia LinkedIn
About the Role
Bitsmith Technologies is seeking a Founding Security Engineer to own SPEAR's security from day one. SPEAR is investigation technology for Indian law enforcement, already in use with police in Maharashtra. Security is the foundation of the technology.
Key Responsibilities
- Application security:
- Threat modeling
- Secure code review
- Addressing OWASP-style issues
- Authentication/Authorization design
- Session management
- Fixing production vulnerabilities
- Cloud and infrastructure security:
- IAM least-privilege
- Secrets management and rotation
- Network controls
- Encryption (in transit and at rest)
- Secure configuration of compute, storage, and databases
- Hardening public-cloud environments
- Access control and multi-tenancy:
- Designing or reviewing RBAC/ABAC
- Tenant isolation
- Privilege escalation prevention
- Auditability of admin actions
- Logging, monitoring, and audit trails:
- Building or operating systems for capturing, protecting, and retaining security events
- Ensuring security events are useful for investigations and compliance
- Incident response:
- Detection, containment, evidence handling
- Post-incident analysis
- Communicating with stakeholders during incidents
- Data protection and compliance:
- Classifying sensitive data
- Implementing controls around sensitive data
- Working with or learning Indian requirements like CERT-In guidelines and the DPDP Act (security safeguards, purpose limitation, data principal rights, breach notification)
- Security operations basics:
- Vulnerability management
- Dependency/supply-chain risk
- Secure SDLC practices
- Knowing when and how to run or interpret penetration tests
Requirements & Tech Stack
Founding ESOP grant from day one.
Flexible hours (before funding).
Monthly stipend (before funding).
Market-level salary and vesting ESOP (after funding).
Conversations stay confidential.
Qualifications
You might be the one if you have experience in:
- Application security
- Cloud and infrastructure security
- Access control and multi-tenancy
- Logging, monitoring, and audit trails
- Incident response
- Data protection and compliance
- Security operations basics